merge: startup reconcile starts the healed InstanceActor (register row 67) — EnsureInstanceStartedCommand to the DM singleton, idempotent, disable-wins, Warning site event on self-heal

src/ZB.MOM.WW.ScadaBridge.Host/Actors/AkkaHostedService.cs

@@ -1024,6 +1024,11 @@ akka {{
         // guarded-writes it (orphans are logged, never deleted). Requires the HTTP
         // config fetcher; if it is somehow absent the self-heal is skipped (best-effort —
         // replication remains the primary path and the next restart retries).
+        // The dmProxy is passed so the pass heals the RUNTIME too (register row 67): each
+        // enabled instance it restores gets an EnsureInstanceStartedCommand routed to the
+        // singleton, which starts the Instance Actor if the boot-time load missed it. Going
+        // through the PROXY (not a local ActorOf) keeps Instance Actors under the singleton
+        // regardless of which node's reconcile pass found the gap.
         if (deploymentConfigFetcher != null)
         {
             var reconcileLogger = _serviceProvider.GetRequiredService<ILoggerFactory>()
@@ -1037,7 +1042,8 @@ akka {{
                     _nodeOptions.NodeName,
                     reconcileLogger,
                     null,
-                    null)),
+                    null,
+                    dmProxy)),
                 "site-reconciliation");
             _logger.LogInformation(
                 "SiteReconciliationActor created (per-node startup self-heal) for site {SiteId} node {Node}",